Skip to content
OpenAdvisories

Product · LiuYuYang01

ThriveX-Server

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-110131

    ThriveX-Server through 4.0 Missing Authorization via Article Retrieval Endpoints

    ThriveX-Server through 4.0 contains a missing authorization vulnerability in the GET /api/article and /api/article/{id} endpoints that allows unauthenticated attackers to read unpublished draft and soft-deleted articles. Attackers can request sequential artic…

    LiuYuYang01 ThriveX-Server